Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: W5bV0ruJGHPjMehSrQwyoh9NAdeRY6/KILywtWLVnRw=
Subject key identifier: FD:24:4C:69:AF:E8:95:79:71:61:C8:1C:78:33:20:67:80:5D:A6:49
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 019F95B72C493FE8CAF8667FED21E87B4395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 17A8
Signing time: Fri 24 Jul 2026 20:00:37 +0000
Manifest this update: Fri 24 Jul 2026 20:00:37 +0000
Manifest next update: Sat 25 Jul 2026 20:00:37 +0000
Files and hashes: 1: UipotQ-uJFFtPyyGfsmm8VGPq_Y.roa (hash: 1ArIsx9oTls8tQ2A71LvIPypaXRgZmQimvwpiodxUUE=)
2: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (hash: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: vbq+Djkz4zpmHEPJc9AZObS3L2AuExl/9slAkRfLAo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:2c:49:3f:e8:ca:f8:66:7f:ed:21:e8:7b:43:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Jul 24 20:00:37 2026 GMT
Not After : Jul 25 20:00:37 2026 GMT
Subject: CN=fd244c69afe895797161c81c78332067805da649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:95:15:af:76:61:f1:4b:1f:fe:8e:d4:7e:
01:83:a0:2c:96:52:7e:5d:72:57:4e:dc:38:bf:32:
cc:48:79:34:a5:0f:81:14:71:be:31:d3:bd:61:dd:
cb:98:04:1f:e2:4f:13:08:25:ce:4d:a3:7c:c0:49:
70:f3:c4:04:e0:04:84:01:7f:e5:28:af:84:f8:56:
d1:c4:ee:77:5d:08:be:a8:be:a1:0c:06:e3:9d:5b:
84:bf:42:bb:f8:ce:05:ea:d8:69:bf:99:55:c0:b5:
5e:10:dd:84:be:b4:88:84:c8:e0:1e:48:6c:9a:17:
22:c0:da:18:56:1b:d6:db:a1:79:bd:72:c0:58:a2:
19:45:cb:5c:fe:17:2e:2a:05:dc:28:49:64:44:b0:
88:b7:d1:5e:e9:77:5c:59:b8:74:d3:08:d4:73:cc:
ed:51:ef:52:d5:1c:9e:c0:90:5f:86:fa:40:af:1f:
c4:01:fc:2c:83:a7:f1:cd:60:80:ee:d1:6d:f6:d3:
a4:cc:d8:3d:a8:f5:5d:97:d5:ee:db:54:e0:a4:4b:
a8:82:a2:34:37:22:c1:44:6e:3e:ee:09:eb:54:22:
43:24:de:e7:06:6c:72:03:be:44:c7:a7:51:b8:69:
86:aa:e4:84:b1:e2:09:ed:28:9c:bd:8e:54:01:88:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:24:4C:69:AF:E8:95:79:71:61:C8:1C:78:33:20:67:80:5D:A6:49
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c7:1f:bf:3c:c0:72:e0:6e:8f:67:f1:a3:80:c8:d3:1f:a3:
52:7b:ca:88:a3:15:dc:28:ec:80:40:34:ad:73:eb:88:27:95:
ff:80:72:67:98:4c:78:f0:85:07:8b:35:10:43:59:9e:b5:91:
8d:f3:92:bd:e3:10:9d:26:20:fb:0d:45:ac:56:f0:c4:b3:8e:
1f:ab:cd:3e:8a:f2:ad:f5:ce:67:54:9a:7e:7f:a8:f6:b9:02:
69:18:bb:8a:ce:f4:05:d2:cc:3c:1e:74:cc:4f:e5:d5:54:b9:
89:23:ac:5a:2a:40:37:36:6f:dc:77:d7:82:e4:68:91:84:df:
4f:ea:c0:ae:f9:28:ec:c7:c5:8b:51:93:5f:93:46:7c:2b:41:
a8:2a:71:8f:a3:b2:6d:db:c3:ca:77:cb:7d:80:f4:51:37:60:
f9:77:29:a9:e7:12:9c:cd:82:ba:c3:90:c0:b4:44:e2:c9:cf:
bd:f5:4a:4b:d9:31:f5:78:91:af:38:9a:3f:98:4d:aa:49:29:
79:c1:47:a5:e2:a7:4c:67:5c:29:8f:be:3b:a7:96:92:c5:d7:
e7:d1:85:ab:bc:6b:b8:34:87:68:96:b6:52:0b:2a:12:c2:ce:
a8:97:63:4d:ab:96:c1:c5:13:3e:59:28:18:ae:6b:0b:e0:bb:
83:97:87:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:15:49 2026 by rpki-client